How to remove $RJHIRM2.exe
- File Details
- Overview
- Analysis
$RJHIRM2.exe
The module $RJHIRM2.exe has been detected as PUP.Systweak
File Details
Product Name: |
|
Company Name: |
|
MD5: |
95acbb2a0adea445d7b09596f4cd703a |
Size: |
3 MB |
First Published: |
2017-05-21 03:02:05 (7 years ago) |
Latest Published: |
2018-11-18 05:03:42 (6 years ago) |
Status: |
PUP.Systweak (on last analysis) |
|
Analysis Date: |
2018-11-18 05:03:42 (6 years ago) |
Overview
%programfiles%\pccleanplus |
%sysdrive%\adwcleaner\quarantine\files\arkdfsckershvzzrtihxiqnvtrdbpwua |
%sysdrive%\adwcleaner\quarantine\files\drkdmyjuupcfxhcqyqgnbjpkxtnwgtnn |
%appdata%\vos\your uninstaller\changes\%program files%\pccleanplus |
%sysdrive%\adwcleaner\quarantine\files\yymdhkhrwivjrgspipwvjyrzwowabrus |
%sysdrive%\adwcleaner\quarantine\files\vgzwxwwphfdrfkjolkjnsvtibeawzbmw |
%sysdrive%\$recycle.bin\s-1-5-21-3185007772-470330461-1568852871-1001\$rlxj3vo |
%sysdrive%\adwcleaner\quarantine\files\yjdtvvtzmishijsrsyhhsogwgqfkyphx |
%sysdrive%\$recycle.bin\s-1-5-21-2607870407-4274040080-1667370927-1001\$r8gezdm |
%sysdrive%\adwcleaner\quarantine\files\ikgylmtmrrxsvaewntkqszysnsxdrwfe |
pccleanplus.exe |
$RJHIRM2.exe |
$R8QGBYS.exe |
$R1LVO64.exe |
$ROSXMTX.exe |
pccpsetup_1095.exe |
|
29.5% |
|
|
13.2% |
|
|
7.5% |
|
|
6.0% |
|
|
5.7% |
|
|
2.7% |
|
|
2.6% |
|
|
2.2% |
|
|
2.1% |
|
|
1.6% |
|
|
1.5% |
|
|
1.2% |
|
|
1.2% |
|
|
1.2% |
|
|
1.1% |
|
|
1.1% |
|
|
1.1% |
|
|
1.0% |
|
|
0.9% |
|
|
0.9% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.7% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.6% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.4% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
Windows 7 |
48.4% |
|
Windows 10 |
43.8% |
|
Windows 8.1 |
6.3% |
|
Windows 8 |
0.7% |
|
Windows Vista |
0.4% |
|
Windows XP |
0.4% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x000113bc |
Name |
Size of data |
MD5 |
.text |
61952 |
1b89617b988c8bd575544f47f0d04258 |
.itext |
3072 |
25478d452b599b551fe11bfb5904d2d0 |
.data |
3584 |
0c3e63b09234b01ce16cff38df28bb6f |
.bss |
0 |
00000000000000000000000000000000 |
.idata |
3584 |
93d91a2b90e60bd758fc0c4908856ae1 |
.tls |
0 |
00000000000000000000000000000000 |
.rdata |
512 |
3dffc444ccc131c9dcee18db49ee6403 |
.rsrc |
75264 |
89edc414ba6b86987126b4b8595b0481 |